{"id":"JLSEC-2026-821","details":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","modified":"2026-07-30T15:15:05.096516772Z","published":"2026-07-30T15:01:04.165Z","upstream":["CVE-2026-23868"],"database_specific":{"license":"CC-BY-4.0","sources":[{"id":"CVE-2026-23868","imported":"2026-07-30T14:38:08.823Z","modified":"2026-07-15T02:18:44.720Z","published":"2026-03-10T20:16:25.517Z","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-23868","html_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23868","database_specific":{"status":"Modified"}}]},"references":[{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16008"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16009"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16030"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16174"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19154"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19367"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19724"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19725"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25096"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8858"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8859"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8861"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8883"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8884"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8885"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8886"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8887"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9290"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9291"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9292"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9294"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9295"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-23868"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446207"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23868.json"},{"type":"WEB","url":"https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7"},{"type":"WEB","url":"https://www.facebook.com/security/advisories/cve-2026-23868"}],"affected":[{"package":{"name":"Giflib_jll","ecosystem":"Julia","purl":"pkg:julia/Giflib_jll?uuid=59f7168a-df46-5410-90c8-f2779963d0ec"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.1.3+0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-821.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}